This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e392e33332e302f32342d3234203d3e20313336373837.roa File: 3139332e392e33332e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: wJxo+GoeFxONQUHU7Gys4nEsXD6D4ny5iemQ0vfRY2A= Subject key identifier: 9E:B2:F0:59:C3:A2:84:A8:D4:3E:DA:05:C3:E2:D4:FC:D9:6F:69:E7 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 6E4230D73A9B9A84AAD5A0B727DB3E8E6052AE3C Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e392e33332e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 19:49:59 +0000 ROA not before: Fri 28 Nov 2025 19:44:59 +0000 ROA not after: Fri 27 Nov 2026 19:49:59 +0000 asID: 136787 IP address blocks: 193.9.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:42:30:d7:3a:9b:9a:84:aa:d5:a0:b7:27:db:3e:8e:60:52:ae:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Nov 28 19:44:59 2025 GMT Not After : Nov 27 19:49:59 2026 GMT Subject: CN=9EB2F059C3A284A8D43EDA05C3E2D4FCD96F69E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1e:09:58:e2:e9:c0:51:c3:58:61:f6:17:5b: 42:40:97:a8:28:13:f5:2d:e0:bd:86:46:4a:e6:b6: f2:90:a1:04:ae:4d:64:1b:2c:b4:eb:e1:ec:e9:97: 51:b7:1b:f1:f7:30:4c:8f:4a:31:ef:2c:1e:db:ea: f3:67:53:96:80:7c:e2:a8:14:18:57:c9:62:e7:24: dc:bf:aa:61:59:15:24:d1:87:ea:d7:57:58:a5:07: 5f:f9:11:4b:38:2b:12:30:e4:e5:d5:e1:96:3b:ef: 9c:45:9a:ec:2c:96:28:c1:2e:d8:e2:dc:e0:7d:46: 0a:88:d2:96:c8:3b:b8:72:3c:a7:47:a7:7c:e6:1a: 43:52:83:9a:42:80:2e:23:21:47:ed:28:61:76:2b: 3c:18:9c:b5:98:ca:69:d2:6a:c4:09:0c:eb:a0:c8: 4d:00:9c:84:50:b4:67:4e:6c:2f:ae:13:99:c3:ba: 7d:14:26:fc:7a:c3:fe:32:e7:6a:c2:8f:d1:ca:b9: c6:ed:ef:f2:92:60:bc:79:b6:fd:32:83:7d:63:ac: e4:68:f6:cf:4b:d1:28:f1:eb:4e:73:d8:e7:42:49: 05:47:54:20:65:08:a7:36:7d:13:bd:b5:4d:1e:a0: 56:59:8c:2d:a5:4c:64:19:be:12:b8:dd:b4:21:f1: 11:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:B2:F0:59:C3:A2:84:A8:D4:3E:DA:05:C3:E2:D4:FC:D9:6F:69:E7 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e392e33332e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.9.33.0/24 Signature Algorithm: sha256WithRSAEncryption 21:b2:8b:27:d3:09:74:7c:f3:0e:2b:af:3b:de:84:94:13:00: 1e:07:1d:43:3c:d2:2a:79:0f:1a:93:cc:c4:a2:4e:11:cb:93: 9e:2d:e5:ad:1b:e8:5f:3e:b5:95:21:18:af:ba:62:eb:ba:ad: 97:9c:69:9d:1a:84:5c:ae:35:5c:f6:13:83:4c:75:91:cd:c6: 2c:5b:62:3f:a0:95:45:9a:32:7e:b6:95:8e:14:00:0c:00:30: a7:7a:40:53:39:14:d3:66:f4:55:bc:b9:b4:44:dc:2f:00:9e: 08:85:ec:87:ff:a8:d7:82:ce:86:26:da:de:f2:26:fb:2b:c2: b8:15:03:93:a5:c9:8d:3d:ff:74:fa:70:49:4f:5f:04:ce:46: 37:7e:50:68:3f:b1:a2:97:2a:cb:c9:b0:96:2b:47:51:7c:f9: 34:d7:9b:1e:f9:d7:84:42:38:46:4c:d3:05:9c:b9:43:0e:5f: 31:c5:3a:2e:8c:c5:42:aa:d9:bb:e9:9b:ec:81:18:6b:7a:8b: 63:e0:14:7b:c9:80:b0:a9:bd:f9:89:6e:3d:62:f7:c9:29:5d: 69:ab:91:ea:78:b3:b4:a2:8a:1b:9d:f9:09:d5:9b:6f:df:38: 3b:b7:52:fa:26:22:50:85:fa:39:84:8e:f3:a8:50:12:94:c7: b2:34:f4:f3 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUbkIw1zqbmoSq1aC3J9s+jmBSrjwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTExMjgxOTQ0NTlaFw0yNjExMjcxOTQ5NTlaMDMxMTAvBgNV BAMTKDlFQjJGMDU5QzNBMjg0QThENDNFREEwNUMzRTJENEZDRDk2RjY5RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6HglY4unAUcNYYfYXW0JAl6go E/Ut4L2GRkrmtvKQoQSuTWQbLLTr4ezpl1G3G/H3MEyPSjHvLB7b6vNnU5aAfOKo FBhXyWLnJNy/qmFZFSTRh+rXV1ilB1/5EUs4KxIw5OXV4ZY775xFmuwslijBLtji 3OB9RgqI0pbIO7hyPKdHp3zmGkNSg5pCgC4jIUftKGF2KzwYnLWYymnSasQJDOug yE0AnIRQtGdObC+uE5nDun0UJvx6w/4y52rCj9HKucbt7/KSYLx5tv0yg31jrORo 9s9L0Sjx605z2OdCSQVHVCBlCKc2fRO9tU0eoFZZjC2lTGQZvhK43bQh8RF5AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUnrLwWcOihKjUPtoFw+LU/NlvaecwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzOTMzMmUzOTJlMzMzMzJl MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMEJ ITANBgkqhkiG9w0BAQsFAAOCAQEAIbKLJ9MJdHzzDiuvO96ElBMAHgcdQzzSKnkP GpPMxKJOEcuTni3lrRvoXz61lSEYr7pi67qtl5xpnRqEXK41XPYTg0x1kc3GLFti P6CVRZoyfraVjhQADAAwp3pAUzkU02b0Vby5tETcLwCeCIXsh/+o14LOhiba3vIm +yvCuBUDk6XJjT3/dPpwSU9fBM5GN35QaD+xopcqy8mwlitHUXz5NNebHvnXhEI4 RkzTBZy5Qw5fMcU6LozFQqrZu+mb7IEYa3qLY+AUe8mAsKm9+YluPWL3ySldaauR 6niztKKKG535CdWbb984O7dS+iYiUIX6OYSO86hQEpTHsjT08w== -----END CERTIFICATE-----Generated at Fri Dec 5 05:41:39 2025 by rpki-client